19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420

Analysis

max time kernel
140s
max time network
148s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
15-12-2024 02:05

Target

19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
Size

94KB
MD5

8463bb2a52278fccd845a2446f8be854
SHA1

7369b66a49a6066030c37e8e1a0ec19ab878e2ec
SHA256

19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420
SHA512

f92579021b6316079c55db56d94dc79b6f8dccd5eac1ca4b8451644b0df8297ed0a1203828bc25cc218da0badb89968fe5a7342d724044ff4ac4de8ff60ccfe7
SSDEEP

1536:mmqmWTbw7U+OU0Cf5UI8E8WwP6kHzgk81VwcG2emZGMUNLe5um7WAgcVjmZIcBI:mms2UVUtBUI8GwPfHkk8rfeLesmqAgcr

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2479	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2479	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2504	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2504	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2506	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2506	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2507	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
2507	19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf

/tmp/19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
/tmp/19e6eb7e3ca3f073200b950dbfa30644d9afcbf99c74c650c8a0016eb0aea420.elf
1⤵
- Loads a kernel module
PID:2476